Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. guardduty
  5. getThreatIntelSet

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.32.0 published on Wednesday, Aug 13, 2025 by Pulumi
pulumi/pulumi-aws-native

aws-native.guardduty.getThreatIntelSet

Explore with Pulumi AI

aws-native logo

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.32.0 published on Wednesday, Aug 13, 2025 by Pulumi
pulumi/pulumi-aws-native

    Resource Type definition for AWS::GuardDuty::ThreatIntelSet

    Using getThreatIntelSet

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getThreatIntelSet(args: GetThreatIntelSetArgs, opts?: InvokeOptions): Promise<GetThreatIntelSetResult>
function getThreatIntelSetOutput(args: GetThreatIntelSetOutputArgs, opts?: InvokeOptions): Output<GetThreatIntelSetResult>
    def get_threat_intel_set(detector_id: Optional[str] = None,
                         id: Optional[str] = None,
                         opts: Optional[InvokeOptions] = None) -> GetThreatIntelSetResult
def get_threat_intel_set_output(detector_id: Optional[pulumi.Input[str]] = None,
                         id: Optional[pulumi.Input[str]] = None,
                         opts: Optional[InvokeOptions] = None) -> Output[GetThreatIntelSetResult]
    func LookupThreatIntelSet(ctx *Context, args *LookupThreatIntelSetArgs, opts ...InvokeOption) (*LookupThreatIntelSetResult, error)
func LookupThreatIntelSetOutput(ctx *Context, args *LookupThreatIntelSetOutputArgs, opts ...InvokeOption) LookupThreatIntelSetResultOutput

    > Note: This function is named LookupThreatIntelSet in the Go SDK.

    public static class GetThreatIntelSet 
{
    public static Task<GetThreatIntelSetResult> InvokeAsync(GetThreatIntelSetArgs args, InvokeOptions? opts = null)
    public static Output<GetThreatIntelSetResult> Invoke(GetThreatIntelSetInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetThreatIntelSetResult> getThreatIntelSet(GetThreatIntelSetArgs args, InvokeOptions options)
public static Output<GetThreatIntelSetResult> getThreatIntelSet(GetThreatIntelSetArgs args, InvokeOptions options)

    fn::invoke:
  function: aws-native:guardduty:getThreatIntelSet
  arguments:
    # arguments dictionary

    The following arguments are supported:

    DetectorId string

    The unique ID of the detector of the GuardDuty account for which you want to create a ThreatIntelSet .

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    Id string
    The unique ID of the threatIntelSet .
    DetectorId string

    The unique ID of the detector of the GuardDuty account for which you want to create a ThreatIntelSet .

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    Id string
    The unique ID of the threatIntelSet .
    detectorId String

    The unique ID of the detector of the GuardDuty account for which you want to create a ThreatIntelSet .

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    id String
    The unique ID of the threatIntelSet .
    detectorId string

    The unique ID of the detector of the GuardDuty account for which you want to create a ThreatIntelSet .

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    id string
    The unique ID of the threatIntelSet .
    detector_id str

    The unique ID of the detector of the GuardDuty account for which you want to create a ThreatIntelSet .

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    id str
    The unique ID of the threatIntelSet .
    detectorId String

    The unique ID of the detector of the GuardDuty account for which you want to create a ThreatIntelSet .

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    id String
    The unique ID of the threatIntelSet .

    getThreatIntelSet Result

    The following output properties are available:

    ExpectedBucketOwner string

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    When you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.

    Id string
    The unique ID of the threatIntelSet .
    Location string
    The URI of the file that contains the ThreatIntelSet.
    Name string
    A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.
    Tags List<Pulumi.AwsNative.Outputs.Tag>

    The tags to be added to a new threat list resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    ExpectedBucketOwner string

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    When you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.

    Id string
    The unique ID of the threatIntelSet .
    Location string
    The URI of the file that contains the ThreatIntelSet.
    Name string
    A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.
    Tags Tag

    The tags to be added to a new threat list resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    expectedBucketOwner String

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    When you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.

    id String
    The unique ID of the threatIntelSet .
    location String
    The URI of the file that contains the ThreatIntelSet.
    name String
    A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.
    tags List<Tag>

    The tags to be added to a new threat list resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    expectedBucketOwner string

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    When you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.

    id string
    The unique ID of the threatIntelSet .
    location string
    The URI of the file that contains the ThreatIntelSet.
    name string
    A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.
    tags Tag[]

    The tags to be added to a new threat list resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    expected_bucket_owner str

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    When you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.

    id str
    The unique ID of the threatIntelSet .
    location str
    The URI of the file that contains the ThreatIntelSet.
    name str
    A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.
    tags Sequence[root_Tag]

    The tags to be added to a new threat list resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    expectedBucketOwner String

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    When you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.

    id String
    The unique ID of the threatIntelSet .
    location String
    The URI of the file that contains the ThreatIntelSet.
    name String
    A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.
    tags List<Property Map>

    The tags to be added to a new threat list resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    Supporting Types

    Tag

    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo

    We recommend new projects start with resources from the AWS provider.

    AWS Cloud Control v1.32.0 published on Wednesday, Aug 13, 2025 by Pulumi
    pulumi/pulumi-aws-native